Digital Forensics in Small Devices: RFID Tag Investigation

6.0 INTRODUCTION
Chapter 6 -
Conclusion
The significant gap in the digital forensics research relating to commercial RFID
business system (RFID BS) tools and professional procedures was noted in
Chapter 1. The relevant literature was reviewed in Chapter 2, including the three-
tier model of a RFID system (Section 2.1, Section 2.2, and Section 2.3), the
challenges and RFID security threats (Section 2.4). A summary was made of the
relevant issues and problems (Section 2.7), notably that wireless RFID enabled
systems are susceptible to malicious attacks. In Chapter 3, a researchable problem
and question were identified (Section 3.2.6 and Section 3.2.7) and a plausible
research methodology specified (Section 3.3 and Section 3.4).
Then, a prototype of a commercial retail environment using a RFID stock
management system was set up in the laboratory and customized RFID
middleware (Appendix 4) was developed by using a Software Development Kit
(SDK) of a RFID reader manufacturing company to help the requirements of the
system design set up. Subsequently, the stabilized RFID BS (Section 3.3.1) was
stressed by a SQL poisoning attack through a RFID tag as part of the data
generation before performing the digital forensic investigation as stated in Section
3.2.1. Hence, the attack was replicated by reviewing the previous literature
(Section 3.1.2). Likewise, the ReaderLogExtractionTool (Appendix 3) was
created to acquire bit-to-bit logs from the RFID reader’s memory and to develop
the customized Helix_RFID_IR toolkit (Appendix 2) before the forensic
investigation was initiated. Then, the compromised RFID BS was investigated.
The evidential search was performed in each of the entities of the RFID BS (Table
2.5 in Section 2.3) by using a Helix_RFID_IR toolkit. Hence, the findings of the
research were presented, analysed and discussed in Chapter 4 and Chapter 5
respectively.
In order to conclude this research project, the following sections are
included. Section 6.1 is a summary of findings from the research conducted and
152